streaak/keyhacks resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

6322 stars · 1225 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

KeyHacks is a curated reference repository listing commands and methods to validate leaked API keys found during bug bounty programs or penetration tests. It covers dozens of services (AWS, GitHub, Slack, MailGun, etc.) with quick checks for whether a key is valid.

Use cases

• validate leaked api keys found in a pentest
• check if an aws access key found in a bug bounty is valid
• test whether a github token is active
• verify slack or mailgun api keys during recon
• learn how to test leaked credentials safely

When to choose

• you are doing bug bounty or penetration testing and found exposed API keys
• you need quick, copy-paste validation commands for many SaaS services
• you want a reference of API key formats and test endpoints

When to avoid

• you need an automated scanner rather than a manual reference
• you are looking for a tool to crack or brute-force credentials
• you need production security tooling with support and licensing

Facets

learning-resource · maturity active

security osint developer-tools security penetration-testing developer-tools cli cross-platform bug-bounty api-key-validation pentest cheatsheet leaked-credentials

Member repositories

For agents

markdown · JSON · MCP: product_card(name="streaak/keyhacks")